CVE-2022-32230

Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD) crash of the Windows kernel. For most systems, this attack requires authentication, except in the special case of Windows Domain Controllers, where unauthenticated users can always open named pipes as long as they can establish an SMB session. Typically, after the BSOD, the victim SMBv3 server will reboot.

• CWE-476
• CWE-476

• https://github.com/zeroSteiner/metasploit-framework/blob/feat/mod/cve-2022-32230/modules/auxiliary/dos/smb/smb_filenormalizednameinformation.rbExploit, Third Party Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-32230Patch, Vendor Advisory
• https://support.microsoft.com/en-us/topic/may-10-2022-kb5013942-os-builds-19042-1706-19043-1706-and-19044-1706-60b51119-85be-4a34-9e21-8954f6749504Patch, Vendor Advisory
• https://www.rapid7.com/blog/post/2022/06/14/cve-2022-32230-windows-smb-denial-of-service-vulnerability-fixed/Exploit, Third Party Advisory
• https://github.com/zeroSteiner/metasploit-framework/blob/feat/mod/cve-2022-32230/modules/auxiliary/dos/smb/smb_filenormalizednameinformation.rbExploit, Third Party Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-32230Patch, Vendor Advisory
• https://support.microsoft.com/en-us/topic/may-10-2022-kb5013942-os-builds-19042-1706-19043-1706-and-19044-1706-60b51119-85be-4a34-9e21-8954f6749504Patch, Vendor Advisory
• https://www.rapid7.com/blog/post/2022/06/14/cve-2022-32230-windows-smb-denial-of-service-vulnerability-fixed/Exploit, Third Party Advisory

Published

Jun 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-32225A reflected DOM-Based XSS vulnerability has been discovered …6.1
• CVE-2022-32226An improper access control vulnerability exists in Rocket.Ch…4.3
• CVE-2022-32227A cleartext transmission of sensitive information exists in …6.5
• CVE-2022-32228An information disclosure vulnerability exists in Rocket.Cha…4.3
• CVE-2022-32229A information disclosure vulnerability exists in Rockert.Cha…4.3
• CVE-2022-3223Cross-site Scripting (XSS) - Stored in GitHub repository jgr…6.1
• CVE-2022-32231Improper initialization in the BIOS firmware for some Intel(…6.7
• CVE-2022-32232Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-32233Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-32234An out of bounds write in hermes, while handling large array…9.8
• CVE-2022-32235When a user opens manipulated AutoCAD (.dwg, TeighaTranslato…5.5
• CVE-2022-32236When a user opens manipulated Windows Bitmap (.bmp, 2d.x3d) …5.5